Legal
Privacy notice
How we collect, use, and protect personal data, and what rights you have under UK data protection law.
Introduction
Tureng Solicitors is committed to safeguarding the privacy and security of personal information collected from website visitors, clients receiving legal or other professional services, and third parties who interact with us or submit information, including but not limited to job applicants (collectively referred to as “you”).
We may collect, use, disclose, and otherwise process personal information in accordance with applicable data protection laws when providing legal services, managing our business operations, and operating our website (“Site”) that links to this notice.
This privacy notice (“Notice”), together with any other referenced documents, sets out the types of personal information we collect, how we collect and process that information, with whom we may share your personal data in connection with the legal services we provide, and your rights and choices regarding the protection of such personal information.
In certain cases, we may provide additional privacy notices specific to particular services or processing activities. These notices are intended to supplement this notice and should be read in conjunction with it.
Please read this notice carefully to understand how we handle your personal information. If you have any questions about how we process your personal data, please contact us using the details under “How to contact us” below or via our Contact page.
Who we are
Tureng Solicitors (“we”, “us” or “our”) [Companies House registration number — to be confirmed] has its registered office at 58 High Street, Waltham Cross, EN8 7BU.
Tureng Solicitors is authorised and regulated by the Solicitors Regulation Authority (SRA number 8014191).
Tureng Solicitors is the data controller of your personal information. We process personal information in compliance with applicable data protection laws, including, where relevant, the General Data Protection Regulation (EU GDPR) and the retained EU law version of the General Data Protection Regulation as defined in the Data Protection Act 2018 (UK GDPR).
Personal information we collect about you
The personal information we collect about you depends on the specific activities you engage in through our site and the legal services we provide. How we use your personal data, and where relevant, our legitimate interests, are detailed below.
Legal services: we may collect personal information to provide legal services to you or your organisation, to fulfil our contractual obligations, and to manage other professional and operational matters on behalf of our clients. Depending on the nature of the services provided, the types of personal information we typically collect include:
Identity and contact information: your name, postal address, personal and/or work phone number, personal and/or work email address, date of birth, marital status, and other personal data relevant to your preferences in relation to our services.
Business information: details regarding your employer, job title, position, and any information provided during the course of the contractual or client relationship between you (or your organisation) and us, or information otherwise voluntarily provided by you or your organisation.
Information relevant to legal advice: this may include personal data relevant to the matters for which we have been instructed to provide legal services, such as information related to disputes, grievances, investigations, arbitration, or other legal matters.
Financial information: bank account details, transaction records, and other financial information necessary for billing, invoicing, and related purposes.
Government identifiers: identification numbers, passport information, driver’s licence details, national insurance numbers, or other government-issued identification.
Regulatory compliance information: information required to meet Know Your Client (KYC) and Anti-Money Laundering (AML) regulatory obligations, including data collected during our client onboarding process. This may include copies of identification documents (e.g. passports), proof of address, and other due diligence documentation.
Sensitive information: in the course of providing legal services, we may collect and process sensitive personal data where necessary. This may include information relating to your health, disabilities, criminal records, religious or philosophical beliefs, trade union membership, racial or ethnic origin, and sexual orientation. Sensitive information requires a higher level of protection, and we will process such data only where necessary for legal proceedings, the provision of legal advice, or for the establishment, exercise, or defence of legal claims.
We handle all personal data collected from or on behalf of our clients in strict compliance with client confidentiality obligations, legal professional privilege, and the terms of our engagement. To support the efficient management of our legal operations and client data, we may utilise secure, cloud-based platforms that are designed to ensure appropriate levels of security and compliance with legal industry standards.
Functionality of our site
When you visit our site, we may automatically collect, store, and process certain information about your interactions with the site. We use this information to ensure the site operates smoothly, securely, and efficiently. This data helps us (i) optimise your browsing experience; (ii) ensure the site displays correctly and performs effectively across different devices and browsers; (iii) improve the site’s features over time based on user interaction patterns; (iv) enhance security by detecting and preventing unauthorised access, potential security threats, or interference; and (v) protect our legal rights if issues related to misuse or unauthorised activities arise.
Additionally, we analyse this data to better understand how you use the site, allowing us to continuously enhance your user experience. The types of personal data we may collect may include:
Browser and technical: your browser type and version, device type and model, internet service provider (ISP) details, Internet Protocol (IP) address, time zone settings, browser plug-in types and versions, and information about your operating system and platform.
Activities and usage data: information about your interactions with the site, including the content you view, features you access, how you engage with content, search terms entered, navigation patterns, time spent on specific pages, and any materials you have shown interest in, registered for, or requested.
We, along with third-party service providers acting on our behalf, may use cookies and similar tracking technologies to collect information from your device when you access and interact with the site. For more details on how we use cookies and how you can manage your cookie preferences, please refer to our Cookie policy under Legal.
Recruitment
We collect personal information from applicants and potential candidates as part of our recruitment process. This information may be collected directly from you, through recruitment agencies, job application platforms, or from other third parties involved in the hiring process.
The types of personal information we may collect during the recruitment process include:
Identity and contact information: your full name, telephone number, and email address.
Resume and application information: details from your CV, cover letter, and other application materials, such as your education, employment history, professional references, qualifications, certifications, position preferences, skills, and areas of interest.
Interview and assessment information: any information you choose to share with us during interviews, assessments, or other stages of the recruitment process.
Additional job applicant information: your gender, date of birth, place of birth (including country and city), and nationality.
Where necessary, we may also collect information regarding your health or disabilities to make reasonable adjustments during the recruitment process, such as facilitating job interviews or assessments.
All personal data collected as part of our recruitment process is handled in accordance with applicable data protection laws and is used solely for purposes related to assessing your candidacy, managing the recruitment process, and fulfilling our legal obligations.
Communicating with you
We collect information through our communication channels when you contact us via our website, email, or telephone. We collect and use your contact details because we have a legitimate interest in responding to enquiries.
We collect personal information when you contact us through our website, email, or telephone. This may include identity and contact information, and any other information you choose to provide during our communications.
How we collect your personal data
We collect personal data about you through a variety of methods, including:
when you engage our legal services;
when you or your organisation seek legal advice from us or utilise any of our professional services;
when you or your organisation offer to provide, or actually provide, goods or services to us;
when you are the subject of, or your personal data is otherwise included in, the legal advice we are instructed to provide to a third-party client (for example, in relation to an employment dispute or where you are the subject of an investigation we are conducting);
when you correspond with us via telephone, email, or other electronic means, in writing, or when you provide information to us directly, including during conversations with our solicitors, consultants, and staff;
when you or your organisation browse, make an enquiry, or otherwise interact with our site;
when you attend our events or sign up to receive information from us, including training;
when you apply for a job with us, including submitting applications, CVs, cover letters, and during the recruitment and interview process;
from third-party sources such as regulatory bodies, government agencies, credit reference agencies, information service providers, or from publicly available records, as required or permitted by law;
from our clients and their representatives when handling personal data in the course of providing legal services; and
from other service providers and information sources that support our legal practice.
If you provide us with personal data about another individual, you must ensure that you comply with the relevant legal obligations, including securing any necessary consents, and that we are permitted to use and share that information with our service providers, if required.
Our purposes and legal bases for collecting and processing personal information
We use your personal information to provide, improve, and operate our services, ensuring a secure, efficient, and personalised experience. In some cases, we also process your data to comply with legal obligations or to pursue our legitimate interests.
Under data protection laws, we must have a lawful basis for processing your personal information. The table below outlines the specific purposes for which we use your data and the corresponding legal bases we rely on.
| Our purposes | Legal bases for processing |
|---|---|
| Providing our professional services. We use your personal information to provide and administer legal services or other services or solutions, as instructed by you or your organisation*. | Performance of our contract with you where necessary to fulfil our contract or agreement, or to take steps leading to such a contract. We have a legitimate interest in (i) providing legal services to our clients and (ii) protecting, establishing, exercising, or defending legal rights or complying with court orders. |
| Financial transaction. We use your personal information to manage and process payments, billing and financial records. | Performance of our contract with you where necessary to fulfil our contract or agreement, or to take steps leading to such a contract. |
| Legal and regulatory compliance. We process personal data to fulfil our legal and regulatory obligations, which may include maintaining records, conducting compliance checks, screening, and monitoring for purposes such as anti-money laundering (AML), financial and credit checks, fraud prevention, crime detection, and compliance with trade sanctions and embargo regulations. This may involve automated checks of personal information provided to us against relevant databases, verifying your identity when necessary, and maintaining records of our communications for compliance and audit purposes**. | Processing of your personal data is necessary for us to meet our legal obligations. We have a legitimate interest in (i) ensuring that our business operations comply with applicable laws and regulations in the jurisdictions where we operate, and (ii) protecting, establishing, exercising, or defending legal rights, including compliance with court orders and legal proceedings. |
| Customer support. When you correspond with us via telephone, email, written communication, or other electronic means, we may use the personal information you provide to respond to your enquiries and for other purposes outlined in this notice. | We have a legitimate interest in effectively managing and responding to your communications, providing you with relevant information, and maintaining efficient and professional engagement. This ensures we can address your requests promptly and deliver appropriate support related to our legal services. |
| Management and administration. We use your personal information for internal management and administrative purposes, including billing, accounting, audit, insurance, compliance with legal or regulatory obligations, adherence to our policies and standards, managing client relationships, identifying authorised representatives, conducting reporting and risk management, and fulfilling other professional duties. We may process personal data to analyse and improve our services and communications and to support the operation and growth of our business activities. | Where required, we process this information to comply with our legal and regulatory obligations. We have a legitimate interest in effectively managing, organising, and optimising our professional activities and business operations. This includes ensuring compliance with applicable laws in the jurisdictions where we operate, maintaining the efficiency and integrity of our internal processes, safeguarding our business assets, supporting informed decision-making, enhancing client relationships, and development of our services. |
| Analytics and improvement. We use personal information to better understand how you interact with the site, content and features, and for other research and analytical purposes, such as improving our services and business operations, developing the site and features, and for internal security purposes. | We have a legitimate interest in improving our site, services and features to expand our outreach and customer base. |
| Recruitment. We use your personal information to process applications for employment. | Performance of our contract with you where necessary to fulfil our contract or agreement, or to take steps leading to such a contract. We have a legitimate interest in (i) assessing your skills, qualifications, and suitability for the role; and (ii) communicating with you and third parties regarding your application and recruitment process. |
| Communication. We may use your personal information to communicate with you to keep you up-to-date on the latest developments, announcements, events and initiatives, and other information about our services (including newsletters and other information). | We have a legitimate interest in maintaining and enhancing our relationship with you. This includes keeping you informed about the latest developments, announcements, and updates related to our services, as well as sharing newsletters and other relevant information. |
* We only process sensitive personal information where it is necessary and permitted by applicable law. This may include fulfilling legal obligations or exercising rights related to employment and social security law, or the establishment, exercise, or defence of legal claims.
** Unless otherwise specified in this privacy notice, any personal data collected as part of our client due diligence processes will be used solely for the purpose of complying with legal obligations related to the prevention of money laundering, terrorist financing, and proliferation financing. We will not process this data for any other purposes without your consent. Furthermore, we do not engage in automated decision-making or profiling that could produce legal effects or similarly significant impacts on you, beyond what is described above.
Disclosures of personal information
We may share your personal information where necessary with the parties listed below for the purposes set out in “Our purposes and legal bases for collecting and processing personal information” above.
We may disclose your personal data to courts, law enforcement agencies, regulatory bodies (including the Solicitors Regulation Authority), and government officials where required by law, or where reasonably necessary for the establishment, exercise, or defence of legal claims, or for the purposes of a confidential alternative dispute resolution process.
We may share your personal data with companies providing services for anti-money laundering checks, identity verification (using secure electronic verification systems), credit risk reduction, and fraud and crime prevention purposes, as well as with financial institutions, credit reference agencies, and relevant regulatory bodies.
If we have collected your personal data in the course of providing legal services to any of our clients, we may disclose it to that client, and, where permitted by law, to other parties for the purpose of delivering those services.
We may share your personal data with other legal professionals, such as barristers, consultants, mediators, experts, and foreign legal specialists, as well as with translators, couriers, and other service providers necessary for the delivery of legal services.
We may provide your personal data to third-party service providers, such as auditors, IT system providers, professional advisors, insurers, and identity check providers. These third parties process your personal data on our behalf and in accordance with our instructions.
Tureng Solicitors may utilise client relationship management (CRM) tools and secure case management systems to support efficient case handling, facilitate collaboration, and ensure the effective management of client matters. These tools help us organise and manage client files, integrate relevant data into our systems, and maintain accurate, up-to-date information.
When we share information with third-party service providers in this capacity, we require them to use your information on our behalf in accordance with our instructions and terms, and only process as necessary for the purpose of the contract.
How we transfer information internationally
We are committed to ensuring that your personal data is securely stored and transferred in accordance with applicable data protection standards. In some cases, your personal data may be transferred to countries outside the UK or the European Economic Area (EEA). When this occurs, we ensure that appropriate safeguards are in place to protect your data. These safeguards include Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, arrangements approved by the UK Information Commissioner’s Office (ICO) to ensure that your personal data receives an adequate level of protection.
Cookies and similar tracking technology
We use cookies and similar tracking technologies to automatically collect information about browsing activity, device type, and similar information within the site. These technologies are used generally to remember your preferences, settings, and customisations for a more personalised experience, to understand how our site is used and improve functionality, performance, and content, and to enhance security and support authentication processes. For more information about the cookies we use and how to change your cookie preferences, please see our Cookie policy under Legal.
Manage your privacy preferences
If you do not wish to accept cookies, you can adjust your browser settings to block all cookies or only third-party cookies. You can also delete any cookies that have already been placed on your device. Please note that these settings must be configured separately for each browser and device you use. For more information on how to manage cookies, please refer to our Cookie policy.
If you prefer not to receive emails regarding the latest developments, announcements, or other information about our services, you can opt out at any time by following the unsubscribe instructions included in each message or by contacting us directly. Please note that even if you opt out of such communications, we may still send you important service-related messages that are necessary for the provision of our services.
Data security
We have implemented appropriate technical and organisational security measures to protect your personal data against accidental, unlawful, or unauthorised destruction, loss, alteration, access, disclosure, or use. We protect your personal data from potential security breaches by implementing specific technological security measures, including encryption, firewalls, and secure layer technology.
In addition, we limit access to your personal data to employees, agents, contractors, and other third parties who have a legitimate business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
Data retention
We will not retain your personal information longer than necessary to fulfil the purposes for which the data was collected or to fulfil our legal obligations or necessary for the establishment, exercise or defence of legal claims or resolving disputes. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, accounting or other requirements.
In some circumstances, you can ask us to delete your data. See “Your rights” for further information.
Your rights
To the extent permitted by applicable data protection laws and regulations, you have the following rights in relation to your personal data:
Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests).
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios: (i) if you want us to establish the data’s accuracy; (ii) where you believe our use of the data is unlawful but you do not want us to erase it; (iii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
If you wish to exercise any of the rights set out above, please refer to “How to contact us”.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Complaints
We hope we will be able to resolve any issues you may have. If you have a concern about how we use your personal data, we would like to work with you to resolve it.
You have the right to make a complaint at any time to your local data protection authority, such as the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (https://www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection authority so please contact us in the first instance.
Changes to this privacy notice
We may update this privacy notice from time to time to reflect changes in laws and regulations, new technologies, or updates to our security practices. When changes are made, we will post the updated version on our website and indicate the effective date at the top of the policy to help you identify when revisions have occurred. We encourage you to review this privacy notice regularly to stay informed about how we protect your personal information.
It is important that the personal data we hold about you is accurate and up to date. Please notify us promptly of any changes to your personal information during the course of your relationship with us, such as changes to your address, email, or other contact details.
How to contact us
Questions, comments and requests regarding this notice are welcomed and should be addressed to Tureng Solicitors, Data Privacy Team, info@turengsolicitors.com. Telephone: 01992 711 417.